CVE-2023-2080 in Web Cloud Security Gateway

الملخص

بحسب MITRE • 16/06/2023

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Forcepoint
• حجز: 14/04/2023
• إفشاء: 16/06/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-231706
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.00511
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Hospital, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-2080
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-2080
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-2080/